# ldger-desktop-web.pages.dev — SUSPICIOUS

> ldger-desktop-web.pages.dev poses as a phishing site with a Google Trust Services SSL certificate, resolving to 188.114.97.3.

## Summary
PhishDestroy identifies ldger-desktop-web.pages.dev as a potential phishing domain actively distributing generic phishing content. This assessment is based on its association with a Google Trust Services SSL certificate, which is commonly abused by threat actors to lend false credibility to malicious sites. The domain resolves to IP 188.114.97.3 and is currently under investigation despite zero detections on VirusTotal (0/95 engines). While the registrar remains Cloudflare, Inc., the combination of a trusted certificate authority and zero early-stage detection flags this as a credible phishing threat requiring immediate scrutiny by security teams.

Technical indicators further validate concerns around this domain. VirusTotal scans show 0 out of 95 antivirus engines flagging the domain as malicious as of the latest intelligence update. The domain is registered through Cloudflare, Inc., a legitimate registrar that also provides proxy and CDN services often exploited by threat actors to obfuscate malicious infrastructure. While exact creation date and blocklist counts are not provided in the dataset, the presence of a Google Trust Services SSL certificate and zero VirusTotal detections suggests this domain may be newly operational or deliberately configured to evade early detection mechanisms. The IP address 188.114.97.3 is associated with Cloudflare’s infrastructure, which complicates attribution and increases the risk of rapid domain cycling.

Users who have visited ldger-desktop-web.pages.dev or have reason to suspect interaction should take immediate action to secure their accounts. Disconnect from the network to prevent potential credential or session hijacking, then scan all endpoints for unauthorized access or malware. Avoid re-engaging with the domain until a formal investigation concludes. Report any suspicious activity involving this domain to your security team and update firewall rules to block traffic to 188.114.97.3. As this threat remains under active investigation, updates will be released as new intelligence becomes available to ensure accurate risk assessment and mitigation guidance.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ldger-desktop-web.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ldger-desktop-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ldger-desktop-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ldger-desktop-web.pages.dev/
Last updated: 2026-04-04